Dominig ar Foll

There is no de facto secured embedded Linux distro while the requirement is becoming more and more critical with raise of IoT in Industrial domains. When looking under the hood of the Yocto built AGL project, it is obvious that it can fit 95% of the most common requirements as a Secured Embedded Linux. We will look how non Automotive industries can easily reuse the AGL code and tools to build their own industrial product and why it's a safer bet than to build it internally.

Industrial IoT cannot be successful without a serious improvement of the security coverage. Unfortunately there is as today, no of-the-shelves offer and the skills required to create such solution, are at best rare, more often out of reach. AGL as created a customizable embedded Linux distro which is nicely designed for reuse in many domains outside of Automotive. During the presentation we will see how to: - start your development with boards readily available on the Net, - change the BSP and add peripherial using Yocto layers or project like MRAA, - integrate a secure boot in your platform, - add your middleware and your application without breaking the maintained Core OS - develop a UI on the integrated screen and/or an HTML remote brower - update the core OS and your add-ons. - get support and influence the project.

One of the key objection raised on IoT is security. Adding security to IoT present two challenges faces: - the delivery of a secured but flexible small embedded OS - the availability of a development environment which enable non security programmer experts to create a safe product.

IoT is often perceived as a glorified embedded challenge. While this is technically partially correct, the market vision of delivering >50 Billion devices by 2020 is not compatible with the current small poll of available embedded developers. The presentation will present solutions which are available in the Open Source and can be used to create an IoT OS and framework which can provide a reasonable security and privacy protection while opening the domain to non expert programmers.

We will address the following issues : - secured boot on standard Open Source HW. - Code and data Integrity - Secured upgrade - Middleware and Application containment. - Developer environment.

More and more embedded projects require support for advance connectivity. With it, comes the requirement to enforce a better security as well as private data protection. Using the layer model of Yocto, we show how we can extract from a complex project such as Tizen, advance connectivity and security and apply it to any embedded project.

The Internet of Things (IoT) is growing fast and opens large opportunities to embedded Linux. Unfortunately traditional embedded Linux has been weak when it comes to security and complex connectivity enabling. Tizen which has been developed as a Linux base OS for connected object (phone, TV, car) is on the other side very well equipped in that area. We will start by explaining what is Tizen architecture and how it provides Security and Connectivity facilities on top of a base Linux. We will then show how Yocto and Tizen-meta can be used to create embedded devices which benefit from several years of work done by the Tizen community. In particular we will review : - the mandatory access control enabling in an embedded device - the enforcement of good behavior by applications - resource access control - connectivity layers - HTML5 App enabling. - multi user mode enabling.

Embedded system such as those used in Automotive, TV, or phones did not need to offer multi user support until recently. With the increasing of personalisation and security requirement, offering single user model, in particular for Automotive, is not any more acceptable. Tizen 3 new Application Framework, which is currently under developement at Tizen.org, introduces a new model which aims at solving those issues. This talk explains how.

Traditional login and application launch process used on Linux PCs does not fit well with Automotive use cases. A new multi user model is currently Under development in the Open at Tizen.org.

We will see how the new Tizen Multi User Application Framework introduces a separation between the screen for the connected user while offering Application sandboxing. We will explain how the model can support guest users, enabling key generic applications to be started before any user login, making them available in a few seconds. We will also clarify what model is offered for Application Sandboxing by default and how it can be expanded to support more security demanding requirements.

We will conclude by explaining what the current state of the codebase is and clarify how to join the project for those interested.